Vulnerabilities and Security Researches

WP Booking Calendar, CVE-2017-2150

CVE, Research URL: CVE-2017-2150
Home page URL: Security reports for WP Booking Calendar
Application: WP Booking Calendar
Published on: Apr 28, 2017
Research Description: Directory traversal vulnerability in Booking Calendar version 7.0 and earlier allows remote attackers to read arbitrary files via specially crafted captcha_chalange parameter.
Affected versions: Min -, max 7.0.
Status: vulnerable